$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc8ab8c7-2789-3705-8ec8-ca2d5738940e.roa File: fc8ab8c7-2789-3705-8ec8-ca2d5738940e.roa (raw, json) Hash identifier: ICfG/ejfaHgNCJN22dEs5x7Px5vbwv9eghQJg6uhpsg= Subject key identifier: 19:A1:59:87:57:2D:44:44:04:A6:F9:A6:68:92:FA:AF:94:BD:53:81 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584ED863DE29BB4C2B31F28C1380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc8ab8c7-2789-3705-8ec8-ca2d5738940e.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 33668 IP address blocks: 68.42.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:63:de:29:bb:4c:2b:31:f2:8c:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=fae01f70-1fa1-4023-8fe8-3acbf95e2cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9f:24:91:dc:21:d0:26:f4:7f:1e:77:c2:33: 33:a0:9b:5c:22:82:41:01:41:8f:a5:5e:21:3d:b8: d7:7a:dd:f8:c0:22:f2:72:01:23:50:55:4c:61:81: fd:2d:81:46:2f:61:d4:6b:06:ea:96:b9:97:d9:6c: 85:2b:50:00:db:7e:f9:cb:e3:e6:8e:21:87:62:37: b7:dd:9c:11:b2:4e:c1:fe:af:23:3c:6a:f7:bd:e7: b5:48:03:ad:cc:74:f0:24:4f:b8:27:f0:90:ae:92: 17:68:48:7d:26:cd:9c:72:75:df:54:6e:d0:8e:ae: ba:2b:f2:04:d6:02:62:8b:4d:29:b9:64:56:e3:73: 7a:9b:07:4f:80:c5:d2:76:b5:6e:09:3b:e0:21:7d: 4d:e6:61:19:f6:12:36:b9:c6:0e:d6:52:60:8b:e9: 00:2a:df:6a:5c:eb:7f:96:08:5e:79:49:84:2c:0f: 6f:c8:05:cb:cd:91:0e:b5:9e:67:ed:32:34:f6:10: a8:c4:76:f4:30:7d:e9:15:f7:99:e4:9b:b3:64:56: 80:29:3c:df:e0:29:35:49:b7:91:2e:ac:40:d6:ea: 8e:a6:0a:8f:c6:9d:82:d6:50:96:4d:37:84:6b:bc: 61:ee:b2:99:db:d6:ec:da:3f:98:df:f4:47:b6:c2: bd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A1:59:87:57:2D:44:44:04:A6:F9:A6:68:92:FA:AF:94:BD:53:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc8ab8c7-2789-3705-8ec8-ca2d5738940e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.42.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:81:fc:d0:c9:25:03:38:a1:cf:d0:20:c1:7f:1c:39:ef:ce: 33:9d:7d:01:c0:bc:9b:c2:80:6a:47:c2:8d:74:eb:aa:bc:b6: f0:08:a2:27:87:10:f4:f2:38:58:eb:73:8d:6e:ed:e3:ed:21: d6:dd:6a:62:02:0f:57:03:51:50:5a:05:34:6f:34:33:cd:b2: 47:b3:84:87:9a:c4:f5:77:4d:d1:f1:f1:00:5d:bd:c2:01:87: 07:f7:3c:d8:57:df:68:4a:ef:e0:f4:60:0e:08:62:99:67:ef: ed:73:39:d7:28:03:82:ea:67:a6:21:71:61:32:44:71:ff:d1: 35:86:d7:a4:1f:44:98:0f:cf:ac:e6:06:d5:11:34:03:49:d8: ab:e2:7c:75:46:6b:a6:e8:1c:f0:18:da:3c:d9:8c:98:66:85: d6:9b:2b:5b:0d:99:fb:75:22:41:c2:83:a0:99:21:ad:10:f2: 3c:ff:c2:ae:97:ab:eb:38:92:9a:96:5e:4e:92:af:a6:8e:c1: 0a:fe:b7:bb:e1:21:af:2d:93:7b:2c:be:50:6d:79:93:84:f6: 69:02:87:11:00:85:db:57:c4:83:04:a5:c7:82:c9:f0:a2:ee: 0a:bc:ae:ae:a1:ec:aa:70:b5:5a:86:00:af:36:c5:b1:46:77: fa:15:3a:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY94pu0wrMfKME4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZmFlMDFmNzAtMWZhMS00MDIzLThmZTgtM2FjYmY5NWUyY2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy58kkdwh0Cb0fx53wjMzoJtcIoJBAUGPpV4h PbjXet34wCLycgEjUFVMYYH9LYFGL2HUawbqlrmX2WyFK1AA2375y+PmjiGHYje3 3ZwRsk7B/q8jPGr3vee1SAOtzHTwJE+4J/CQrpIXaEh9Js2ccnXfVG7Qjq66K/IE 1gJii00puWRW43N6mwdPgMXSdrVuCTvgIX1N5mEZ9hI2ucYO1lJgi+kAKt9qXOt/ lgheeUmELA9vyAXLzZEOtZ5n7TI09hCoxHb0MH3pFfeZ5JuzZFaAKTzf4Ck1SbeR LqxA1uqOpgqPxp2C1lCWTTeEa7xh7rKZ29bs2j+Y3/RHtsK96wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmhWYdXLUREBKb5pmiS+q+UvVOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmM4YWI4YzctMjc4OS0z NzA1LThlYzgtY2EyZDU3Mzg5NDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCqkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmB/NDJJQM4oc/QIMF/HDnvzjOdfQHAvJvCgGpHwo1066q8tvAIoieH EPTyOFjrc41u7ePtIdbdamICD1cDUVBaBTRvNDPNskezhIeaxPV3TdHx8QBdvcIB hwf3PNhX32hK7+D0YA4IYpln7+1zOdcoA4LqZ6YhcWEyRHH/0TWG16QfRJgPz6zm BtURNANJ2KvifHVGa6boHPAY2jzZjJhmhdabK1sNmft1IkHCg6CZIa0Q8jz/wq6X q+s4kpqWXk6Sr6aOwQr+t7vhIa8tk3ssvlBteZOE9mkChxEAhdtXxIMEpceCyfCi 7gq8rq6h7KpwtVqGAK82xbFGd/oVOis= -----END CERTIFICATE-----Generated at Fri Sep 25 09:41:02 2026 by rpki-client